{"id":100527,"date":"2021-06-16T16:22:37","date_gmt":"2021-06-16T14:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlena-biblioteka-aya-dlya-sozdaniya-ebpf-obrabotchikov-na-yazyke-rust"},"modified":"2021-06-16T16:22:37","modified_gmt":"2021-06-16T14:22:37","slug":"predstavlena-biblioteka-aya-dlya-sozdaniya-ebpf-obrabotchikov-na-yazyke-rust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/predstavlena-biblioteka-aya-dlya-sozdaniya-ebpf-obrabotchikov-na-yazyke-rust","title":{"rendered":"The Aya library for creating eBPF handlers in Rust has been introduced","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The first release of the Aya library has been introduced, allowing the creation of eBPF handlers in the Rust language that run inside the Linux kernel in a special virtual machine with JIT. Unlike other tools for developing eBPF programs, Aya does not use libbpf and the bcc compiler, but offers its own implementation written in Rust, which uses the libc crate package for direct access to kernel system calls. No C language tools or kernel header files are required to build Aya. The library's code is distributed under the MIT and Apache 2.0 licenses. <\/p>\n
Main Features: <\/p>\n
\n
Support for the BTF (BPF Type Format) which provides information on types in BPF pseudocode for type checking and matching with types provided by the current kernel. The use of BTF allows the creation of universal eBPF handlers that can be used without recompilation with different versions of the Linux kernel.\n
Support for calls to 'bpf-to-bpf', global variables, and initializers, which allows writing programs for eBPF similar to standard programs using aya as a runtime, overriding functions to work within eBPF.\n
Support for various kernel types, including regular arrays, hash maps, stacks, queues, stack tracing, as well as structures for sockets and performance tracking.\n
The ability to create various types of eBTF programs, including programs for filtering and traffic management, cgroup handlers, and various socket operations, as well as XDP programs.\n
Support for platforms for asynchronous request processing in non-blocking mode, such as tokio and async-std.\n
Fast build, without being tied to kernel build and header files. <\/ul>\n
The project is still considered experimental \u2014 the API is not yet stabilized and continues to evolve. Additionally, not all intended features have been implemented. By the end of the year, developers aim to bring Aya's functionality to parity with libbpf, and in January 2022, to release the first stable version. There are also plans to merge parts of Aya necessary for writing Linux kernel code in Rust with components that operate in user space and are used for loading, attaching, and interacting with eBPF programs. <\/p>\n
Let us recall that eBPF is a built-in interpreter for bytecode in the Linux kernel, allowing the creation of handlers for network operations, monitoring system performance, intercepting system calls, controlling access, processing events with timing retention, counting the frequency and execution time of operations, and performing tracing with kprobes\/uprobes\/tracepoints. Thanks to JIT compilation, the bytecode is translated on the fly into machine instructions and executed with the performance of native code. XDP provides means to run BPF programs at the network driver level, enabling direct access to the DMA buffer of packets, which allows creating high-performance handlers for operation under heavy network loads. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"